
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf855130-fda4-34bf-8520-ad9bab8ec4d7.roa
File: bf855130-fda4-34bf-8520-ad9bab8ec4d7.roa (raw, json)
Hash identifier: MgUKEGSg14Kubnfja+R4dqFG8huN7pfzU7hEvITLhts=
Subject key identifier: DD:09:81:16:4F:19:AC:0E:C9:79:9F:00:FF:85:4B:92:C0:3E:2B:D7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584E534F404D54D68A2EF825AE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf855130-fda4-34bf-8520-ad9bab8ec4d7.roa
Signing time: Sun 28 Jun 2026 21:00:11 +0000
ROA not before: Sun 28 Jun 2026 21:00:11 +0000
ROA not after: Sat 26 Sep 2026 21:00:11 +0000
asID: 397212
IP address blocks: 2001:503:d2d::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:53:4f:40:4d:54:d6:8a:2e:f8:25:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jun 28 21:00:11 2026 GMT
Not After : Sep 26 21:00:11 2026 GMT
Subject: CN=ff15b93d-3209-425b-a608-67c89a266811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:45:be:28:dd:d8:9a:b9:cf:6f:2a:74:57:
01:1e:c8:1e:7c:7f:de:af:07:6f:13:90:c1:3e:31:
dd:92:97:f1:76:4f:e5:9a:c5:2d:fa:45:24:73:6a:
a9:ca:73:db:5a:c0:70:b7:db:15:be:23:f4:b5:9f:
39:2b:c5:56:a1:1d:6f:4f:0e:f0:64:46:b5:cc:aa:
99:53:1f:43:07:d9:ec:5e:e2:13:72:16:48:80:d4:
b8:4b:ae:68:e7:99:c5:fc:8d:c1:74:b4:8b:13:4a:
c0:68:9f:d9:9c:77:5f:5d:73:38:d7:22:70:ea:d3:
42:58:ca:93:51:41:d7:a8:31:e3:fa:ba:d4:01:8f:
35:68:89:04:a5:fb:16:c0:d5:ba:b1:9f:06:12:2b:
19:a2:cb:eb:8b:31:0f:a0:c5:e3:17:c1:4c:40:c3:
29:31:80:ef:cb:71:0f:b6:0c:a7:28:50:1a:1f:04:
d1:3a:d3:2c:67:39:4b:7f:05:1a:96:29:18:a6:94:
be:f5:f2:4e:bd:a1:87:36:e4:65:82:d2:18:90:5b:
45:0c:56:bc:d8:1c:19:c3:1c:39:19:31:8e:50:cb:
59:a6:7b:a5:cb:05:9a:b8:18:d8:ed:ea:cb:b9:47:
36:59:ed:e8:02:47:15:0d:e4:aa:e4:a2:4e:04:d0:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:81:16:4F:19:AC:0E:C9:79:9F:00:FF:85:4B:92:C0:3E:2B:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf855130-fda4-34bf-8520-ad9bab8ec4d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:503:d2d:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:6c:34:b6:ed:df:c8:f0:c9:88:70:b1:05:7d:b0:d1:4b:a3:
7f:55:5f:5a:31:54:01:8a:9d:50:1b:c8:b7:b3:e8:93:c1:94:
3c:02:9b:a1:36:7d:09:1d:8e:8c:a1:1d:fe:b4:aa:e0:15:3c:
70:32:12:29:78:e0:f4:dc:e3:74:0b:98:76:31:ae:2f:0b:05:
7f:9b:7a:c1:b2:60:40:25:52:d0:58:24:8d:db:d5:82:a0:8d:
c3:71:aa:aa:60:ea:e1:b8:e8:4b:e5:ea:77:f9:28:45:e4:60:
4a:67:07:04:3f:8b:21:27:58:75:96:da:02:06:fe:e7:94:03:
b0:ee:02:b0:8e:a1:2d:4a:57:74:1c:b6:b3:03:a0:d1:72:f2:
8c:96:98:07:16:f4:90:26:86:c8:dd:85:2c:22:9a:7d:3b:34:
37:b6:ed:dc:09:12:ab:3d:44:12:36:cd:f3:ce:ad:73:39:0b:
d0:6e:b9:24:6c:07:b0:21:54:0c:87:f2:12:50:fb:9b:49:61:
a8:6b:71:ab:fe:43:f1:ed:7a:5d:dd:58:b0:a3:9a:51:c9:9b:
75:0e:2d:09:89:75:26:1f:f7:44:af:5c:5f:82:d2:38:53:e2:
2c:38:31:04:19:30:34:58:62:bc:d9:9e:79:64:3f:51:20:07:
cf:36:3d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:46 2026 by rpki-client